Ledger All ledgers
Frontend & Infrastructure hacks
101 incidents classified as Frontend & Infrastructure, with $7.49bn in known losses.
$7.49bn lost across 101 incidents, 7.6% of the ledger
Largest: Binance ($6.36bn), Mixin Network ($200.0m), Badger DAO ($120.0m).
2018
2019
2020
2021
2022
2023
2024
2025
$6.50bn2026
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 01 Nov 2026 | BTCPay Server | — | Wallet | Key Leaked via Infrastructure | — |
| 29 Oct 2026 | Polymarket International | $2.7m | Prediction Market | Supply Chain Attack | — |
| 29 Oct 2026 | Binance | $6.36bn | CEX | Key Leaked via Infrastructure | — |
| 27 Oct 2026 | Predict Fun | $400,000 | Prediction Market | Frontend Compromise | — |
| 26 Oct 2026 | Bloom Trading Bot | $953,000 | Wallet | Supply Chain Attack | — |
| 26 Oct 2026 | Myriad Markets | $0 | DeFi Protocol | Key Leaked via Infrastructure | — |
| 09 Oct 2026 | Ledger (Supply Chain) | $93.0m | Wallet | Supply Chain Attack | — |
| 26 Jul 2026 | Garden | $450,000 | DeFi Protocol | Database Breach | — |
| 25 Jun 2026 | Polymarket International | $3.0m | DeFi Protocol | Frontend Compromise | — |
| 19 May 2026 | Bankr | $170,000 | AI Agent | Session Key Compromised | — |
| 14 Apr 2026 | CoW Swap | $1.2m | DeFi Protocol | DNS Hijack | — |
| 21 Mar 2026 | Resolv USR | $24.5m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 18 Mar 2026 | Neutrl | — | DeFi Protocol | DNS Hijack | — |
| 11 Mar 2026 | BONK Fun | $30,000 | ICO | DNS Hijack | — |
| 25 Jan 2026 | Matcha | $13.4m | DeFi Protocol | Frontend Compromise | — |
| 07 Jan 2026 | Polycule | $230,000 | DeFi Protocol | Key Leaked via Infrastructure | — |
| 25 Dec 2025 | Trust Wallet Wallet | $8.5m | Wallet | Supply Chain Attack | — |
| 21 Nov 2025 | Aerodrome V1 | $700,000 | DeFi Protocol | DNS Hijack | — |
| 30 Oct 2025 | Garden | $11.4m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 27 Oct 2025 | 402bridge | $17,693 | DeFi Protocol | Key Stored Publicly | — |
| 09 Sept 2025 | SwissBorg | $41.5m | CEX | API Key Compromised | — |
| 16 Jul 2025 | BigONE | $27.0m | CEX | Supply Chain Attack | — |
| 08 May 2025 | BitoPro | $11.5m | CEX | Key Leaked via Infrastructure | — |
| 01 Apr 2025 | Zapper | — | DeFi Protocol | DNS Hijack | — |
| 28 Jan 2025 | DogWifTools | $10.0m | Other | Key Stored Publicly | — |
| 04 Nov 2024 | MetaWin | $4.4m | Gaming | Key Leaked via Infrastructure | — |
| 31 Oct 2024 | 1inch Swap | $723,000 | DeFi Protocol | Supply Chain Attack | — |
| 17 Oct 2024 | Ambient | — | DeFi Protocol | DNS Hijack | — |
| 19 Sept 2024 | Banana Gun | $3.0m | DeFi Protocol | Frontend Compromise | $3.0m |
| 10 Sept 2024 | Indodax | $25.2m | CEX | Key Leaked via Infrastructure | — |
| 23 Jul 2024 | dYdX V3 | $31,000 | DeFi Protocol | DNS Hijack | — |
| 09 Jun 2024 | Loopring | $5.0m | DeFi Protocol | API Key Compromised | — |
| 31 Mar 2024 | FixedFloat | $3.0m | CEX | Key Leaked via Infrastructure | — |
| 20 Mar 2024 | LayerSwap | $100,000 | DeFi Protocol | DNS Hijack | — |
| 18 Feb 2024 | FixedFloat | $26.1m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 23 Jan 2024 | Gamee | $7.0m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 27 Dec 2023 | Thunder Terminal | $240,000 | CEX | Key Leaked via Infrastructure | — |
| 20 Dec 2023 | INX Digital Company | $1.6m | CEX | Key Leaked via Infrastructure | — |
| 14 Dec 2023 | Ledger Connect Kit | $484,000 | Wallet | Supply Chain Attack | — |
| 29 Nov 2023 | Velodrome | $250,000 | DeFi Protocol | DNS Hijack | — |
| 18 Nov 2023 | SpookySwap | $5,000 | DeFi Protocol | Frontend Compromise | — |
| 18 Nov 2023 | Kronos Research | $26.0m | Other | API Key Compromised | — |
| 06 Oct 2023 | Galxe | $270,000 | Other | DNS Hijack | — |
| 23 Sept 2023 | Mixin Network | $200.0m | Other | Database Breach | — |
| 19 Sept 2023 | Balancer V2 | $238,000 | DeFi Protocol | Frontend Compromise | — |
| 15 Sept 2023 | Remitano | $2.7m | CEX | Key Leaked via Infrastructure | — |
| 07 Sept 2023 | Fortress Trust | $12.0m | CEX | Key Leaked via Infrastructure | — |
| 15 Aug 2023 | RocketSwap Base | $865,000 | DeFi Protocol | Key Leaked via Infrastructure | — |
| 11 Jun 2023 | Floating Point Group | $15.0m | CEX | Key Leaked via Infrastructure | — |
| 03 Jun 2023 | Atomic Wallet | $100.0m | Wallet | Supply Chain Attack | — |
| 31 May 2023 | unshETH | $375,000 | DeFi Protocol | Key Stored Publicly | — |
| 26 May 2023 | Patricia | $2.0m | CEX | Database Breach | — |
| 03 Apr 2023 | MEV-Boost Relay | $20.0m | Other | Key Leaked via Infrastructure | — |
| 17 Mar 2023 | General Bytes | $1.5m | Other | Key Leaked via Infrastructure | — |
| 27 Feb 2023 | MyAlgo | $9.2m | Wallet | CDN Compromise | — |
| 11 Dec 2022 | 3Commas | $20.0m | CEX | Database Breach | — |
| 03 Dec 2022 | BTC.com | $3.0m | Wallet | Key Leaked via Infrastructure | — |
| 03 Nov 2022 | pNetwork | $4.3m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 13 Oct 2022 | FTX | $70,000 | CEX | API Key Compromised | — |
| 01 Sept 2022 | KyberSwap Classic | $265,000 | DeFi Protocol | CDN Compromise | — |
| 18 Aug 2022 | Celer cBridge | $240,000 | DeFi Protocol | DNS Hijack | — |
| 09 Aug 2022 | Curve DEX | $575,000 | DeFi Protocol | DNS Hijack | $575,000 |
| 02 Aug 2022 | Slope Wallet | $4.1m | Wallet | Key Stored Publicly | — |
| 17 Jul 2022 | Premint | $375,000 | NFTfi | Frontend Compromise | — |
| 24 Jun 2022 | Ribbon | $12,000 | DeFi Protocol | DNS Hijack | — |
| 24 Jun 2022 | Convex Finance | $14,000 | DeFi Protocol | DNS Hijack | — |
| 14 May 2022 | SpiritSwap V3 | $18,000 | DeFi Protocol | DNS Hijack | — |
| 14 May 2022 | Quickswap V3 | $107,600 | DeFi Protocol | DNS Hijack | — |
| 04 May 2022 | MM Finance Cronos | $2.0m | DeFi Protocol | DNS Hijack | — |
| 12 Feb 2022 | IRA Financial / Gemini | $36.0m | CEX | API Key Compromised | — |
| 03 Feb 2022 | KlaySwap | $1.9m | DeFi Protocol | Frontend Compromise | — |
| 01 Feb 2022 | BNS | $7.5m | CEX | Key Leaked via Infrastructure | — |
| 18 Jan 2022 | Crypto-com | $33.7m | CEX | Session Key Compromised | — |
| 08 Jan 2022 | LCX | $7.9m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 02 Dec 2021 | Badger DAO | $120.0m | DeFi Protocol | CDN Compromise | — |
| 01 Oct 2021 | Coinbase | — | CEX | Session Key Compromised | — |
| 17 Sept 2021 | JayPegs Automart | $3.1m | DeFi Protocol | Frontend Compromise | — |
| 30 Jul 2021 | Levyathan | $1.5m | DeFi Protocol | Key Stored Publicly | — |
| 15 Mar 2021 | PancakeSwap / Cream Finance | — | DeFi Protocol | DNS Hijack | — |
| 26 Dec 2020 | Altilly | $750,000 | CEX | API Key Compromised | — |
| 24 Dec 2020 | Livecoin | $3.3m | CEX | API Key Compromised | — |
| 14 Dec 2020 | Nexus Mutual | $8.0m | DeFi Protocol | Key Leaked via Infrastructure | — |
| 31 Jul 2020 | 2gether | $1.2m | CEX | Key Leaked via Infrastructure | — |
| 11 Jul 2020 | Cashaa | $3.1m | CEX | Key Leaked via Infrastructure | — |
| 12 Feb 2020 | Trinity Wallet | $2.0m | Wallet | CDN Compromise | — |
| 05 Feb 2020 | Altsbit | $70,000 | CEX | Key Leaked via Infrastructure | — |
| 08 Nov 2019 | VinDAX | $500,000 | CEX | Key Leaked via Infrastructure | — |
| 17 Aug 2019 | CoinTiger (PTT) | $9.2m | CEX | Key Leaked via Infrastructure | — |
| 12 Jul 2019 | BitPoint | $27.6m | CEX | Key Leaked via Infrastructure | — |
| 24 Mar 2019 | DragonEx | $7.0m | CEX | Key Leaked via Infrastructure | — |
| 24 Mar 2019 | Etbox | $132,000 | CEX | Key Leaked via Infrastructure | — |
| 26 Jan 2019 | LocalBitcoins | $27,000 | CEX | Key Leaked via Infrastructure | — |
| 07 Nov 2018 | Gate | — | CEX | Supply Chain Attack | — |
| 21 Jun 2018 | Bithumb | $31.0m | CEX | Key Leaked via Infrastructure | — |
| 20 Dec 2017 | EtherDelta | $1.4m | CEX | DNS Hijack | — |
| 08 Dec 2017 | NiceHash | $64.0m | CEX | Key Leaked via Infrastructure | — |
| 18 Jul 2017 | CoinDash | $7.7m | ICO | Frontend Compromise | — |
| 23 Oct 2013 | Inputs.io | $1.2m | CEX | Key Leaked via Infrastructure | — |
| 05 Sept 2012 | Bitfloor | $250,000 | CEX | Key Stored Publicly | — |
| 11 May 2012 | Bitcoinica | $90,000 | CEX | Key Leaked via Infrastructure | — |
| 01 Mar 2012 | Bitcoinica | $228,000 | CEX | Key Leaked via Infrastructure | — |
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “Frontend & Infrastructure hacks”, data to 2 November 2026, https://bitminer.io/ledger/failures/method/frontend-infrastructure/. How this is built